non-interactive commands fail in PAM tty check on solaris 8. Not all systems are affected. It seems to depend on the system PAM patches. Problem does not occur on Solaris 9.
Created attachment 450 [details] patch to fix problem
Some PAM modules in Solaris 8 require the tty to be set. So sshd sets it to "ssh". However, some versions of Solaris 8 PAM require the tty to begin with "/dev/". Changing auth-pam.c to use "/dev/console", or "/dev/ssh", fixes it.
I wonder if PAM_TTY=/dev/ssh will break any other platforms? Maybe it should be inside an #ifdef PAM_SUN_CODEBASE? (I don't think using /dev/console is a good idea, though.)
Someone posted this to openssh-unix-dev@ > In case you have problems with 3.7.1p1 on Solaris 8 and have the > following messages logged: > > fatal: PAM: pam_open_session(): Can not make/remove entry for > session > > Try installing Sun patch 111659-07 or later (or some later patch > which incorporates this patch). This fixed it for me, YMMV. Is this patch installed on the affected system?
*** Bug 728 has been marked as a duplicate of this bug. ***
No reply==closed bug
Mass change of RESOLVED bugs to CLOSED